| Package | Affected versions | Patched versions |
|---|---|---|
| shopping cart | = 4.0.1 |
The ProcessLogin function in class.auth.php in Interspire Shopping Cart (ISC) 4.0.1 Ultimate edition allows remote attackers to bypass authentication and obtain administrative access by reusing the RememberToken cookie after a failed admin login attempt.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free